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Amendments to the Claims 

i 

This listing will replace all prior versions, and listings, of the claims in the application. 
Please cancel claims 34-39, without prejudice or disclaimer. 

Listing of the Claims : 

1 . (original) An authentication method wherein: 

a user owns an electronic value including encrypted value authentication information 
(F(VPW)) wherein said authentication information (VPW) corresponding to said electronic value 
specified by user is encoded by a first irreversible calculation process (F), 

in process for authenticating user as the right owner of said electronic value, 
authentication side generates a random number (R) and transmits it to user side, 

a user side generates value authentication information (F(VPW')) from authentication 
information (VPW) corresponding to an electronic value input by user, further generates 
authentication information (G(R,F(VPW))) wherein said random number (R) and value 
authentication information (F(VPW')) are concatenated and encoded by a second irreversible 
calculation process (G) and transmits said electronic value and authentication information 
(G(R,F(VPW))) to said authentication side, 

said authentication side decrypts code of received electronic value, extracts value 
authentication information (F(VPW)) from electronic value, generates authentication information 
(G(R,F(VPW))) wherein said random number (R) and value authentication information 
(F(VPW)) are concatenated and encoded by said second irreversible calculation process (G), 
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collates said received authentication information (G(R 5 F(VPW))) with said generated 
authentication information (G(R,F(VPW))), verifies that they are identical, and authenticates 
user. 

2. (original) The authentication method of claim 1 wherein: 

a decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by a third 
irreversible calculation process (H) and master key, 

in process for authenticating user as the rightful owner of said electronic value, said user 
side further generates data (H(F(VPW))) wherein value authentication information (F(VPW')) is 
encoded by said third irreversible calculation process (H), transmits data (H(F(VPW'))) with said 
electronic value and said authentication information (G(R,F(VPW 5 ))) to said authentication side, 

said authentication side generates a decryption key from received data (H(F(VPW))) 
and master key, and decrypts code of received electronic value. 

3. (original) A mutual authentication method wherein: 

a user owns an electronic value including an encrypted value authentication information 
(F(VPW)) wherein authentication information (VPW) corresponding to said electronic value 
specified by user is encoded by a first irreversible calculation process (F), 

in a mutual authentication process, wherein a user is authenticated as the rightful owner 
of said electronic value and user authenticates the authentication side, authentication side 
generates a first random number (Rl) and transmits it to user side, 
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said user side generates value authentication information (F(VPW')) from authentication 
information (VPW) corresponding to electronic value input by user, generates a second random 
number (R2), further generates authentication information (G(R1,F(VPW))) wherein said first 
random number (Rl) and said value authentication information (F(VPW')) are concatenated and 
encoded by a second irreversible calculation process (G) and transmits said electronic value, 
authentication information (G(R1,F(VPW 5 ))) and second random number (R2) to said 
authentication side, 

authentication side decrypts code of received electronic value, extracts value 
authentication information (F(VPW)) from said electronic value, generates authentication 
information (G(R1,F(VPW))) wherein said first random number (Rl) and value authentication 
information (F(VPW)) are concatenated and encoded by a second irreversible calculation process 
(G), collates said received authentication information (G(R1,F(VPW 5 ))) with said generated 
authentication information (G(R1,F(VPW))), verifies that they are identical, and authenticates 
user, 

further generates authentication information (I(R1,R2,F(VPW))) wherein said first 
random number (Rl), said second random number (R2) and value authentication information 
(F(VPW)) are concatenated and encoded by a fourth irreversible calculation process (I), 
transmits it to user side, 

said user side generates authentication information (I(R1,R2,F(VPW))) wherein said 
first random number (Rl), said second random number (R2) and value authentication 
information (F(VPW')) are concatenated and encoded by said fourth irreversible calculation 
process (I), collates said received authentication information (I(R1,R2,F(VPW))) with said 
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generated authentication information (I(R1,R2,F(VPW'))), verifies that they are identical, and 
authenticates authentication side. 

4. (original) The mutual authentication method of claim 3 wherein: 

said decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by said second 
irreversible calculation process (H) and master key, 

in mutual authentication process wherein authentication side authenticates user as the 
rightful owner of said electronic value and user authenticates the authentication side, said user 
side further generates data (H(F(VPW))) wherein value authentication information (F(VPW')) is 
encoded by said third irreversible calculation process (H), transmits data (H(F(VPW'))X said 
electronic value, said authentication information (G(R1,F(VPW'))) 5 and said second random 
number (R2) to authentication side 

authentication side generates said decryption key from received data (H(F(VPW))) and 
master key, and decrypts code of said received electronic value. 

5. (original) An update processing method wherein: 

a user owns electronic value including an encrypted value authentication information 
(F(VPW)) wherein authentication information (VPW) corresponding to electronic value 
specified by user is encoded by a first irreversible calculation process (F), 
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in update process wherein authentication side validates said electronic value and updates 
content of electronic value, authentication side generates a first random number (Rl) and 
transmits it to user side, 

user side generates value authentication information (F(VPW')) from authentication 
information (VPW) corresponding to electronic value input by user, generates a second random 
number (R2), further generates authentication information (G(R1,F(VPW 5 ))) wherein said first 
random number (Rl) and said value authentication information (F(VPW')) are concatenated and 
encoded by a second irreversible calculation process (G) and transmits said electronic value, 
authentication information (G(R1,F(VPW))) and said second random number (R2) to 
authentication side, 

authentication side decrypts code of received said electronic value, extracts value 
authentication information (F(VPW)) from said electronic value, generates value authentication 
information (G(R1,F(VPW))) wherein said first random number (Rl) and value authentication 
information (F(VPW)) are concatenated and encoded by said second irreversible calculation 
process (G), collates said received authentication information (G(R1,F(VPW))) with said 
generated authentication information (G(R1,F(VPW))), verifies that they are identical, and 
authenticates user, 

further generates said electronic value whose content is updated, further generates 
authentication information (I(R1,R2,F(VPW))) wherein said first random number (Rl), said 
second random number (R2) and value authentication information (F(VPW)) are concatenated 
and encoded by a third irreversible calculation process (I), transmits said electronic value whose 
content is updated to user side and authentication information (I(R1,R2,F(VPW))) to user side, 
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user side generates authentication information (I(R1,R2,F(VPW'))) wherein said first 
random number (Rl), said second random number (R2) and value authentication information 
(F(VPW')) are concatenated and encoded by said third irreversible calculation process (I), 
collates said received authentication information (I(R1,R2,F(VPW))) with generated 
authentication information (I(R1,R2,F(VPW))), verifies that they are identical, authenticates 
authentication side, and updates electronic value to received said electronic value whose content 
is updated. 

6. (original) The update processing method of claim 5 wherein: 

a decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by said third 
irreversible calculation process (H) and master key, 

in update process wherein authentication side validates said electronic value and updates 
content of electronic value, user side further generates data (H(F(VPW))) wherein value 
authentication information (F(VPW')) is encoded by said third irreversible calculation process 
(H), transmits data (H(F(VPW))), said electronic value, said authentication information 
(G(R1,F(VPW))), and said second random number (R2) to authentication side 

authentication side generates said decryption key from received data (H(F(VPW))), and 
a master key decrypts code of received electronic value. 

7. (original) A mobile terminal wherein: 
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comprising storage means storing electronic value, generating value authentication 
information (F(VPW')) wherein value authentication information (VPW) corresponding to said 
electronic value input by a user is encoded by a first irreversible calculation process (F), further 
generating a second random number (R2), further encoding by an irreversible calculation process 
(F) on data wherein said value authentication information (F(VPW')) and a first random number 
(Rl) received from authentication apparatus are concatenated, generating authentication 
information (G(R1,F(VPW))), and transmitting said electronic value, authentication information 
(G(R1,F(VPW))) and said second random number (R2) to authentication apparatus, thereby 
authenticating user to be the rightful owner of said electronic value. 

8. (original) A mobile terminal wherein: 

comprising storage means storing electronic value, generating value authentication 
information (F(VPW')) wherein value authentication information (VPW) corresponding to said 
electronic value input by a user is encoded by a first irreversible calculation process (F), further 
generating a second random number (R2), further encoded by a second irreversible calculation 
process (G) on data wherein said value authentication information (F(VPW')) and a first random 
number (Rl) received from authentication apparatus are concatenated, generating authentication 
information (G(R1,F(VPW))), and transmitting said electronic value, authentication information 
(G(R1,F(VPW))) and said second random number (R2) to authentication apparatus, thereby 
authenticating user to be the rightful owner of said electronic value, generating authentication 
information (I(R1,R2,F(VPW))) wherein said first random number (Rl), said second random 
number (R2) and value authentication information (F(VPW')) are concatenated and encoded by a 
third irreversible calculation process (I), collating said authentication information 
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(I(R1,R2,F(VPW))) received from said authentication apparatus with generated authentication 
information (I(R1,R2,F(VPW'))), verifying that they are identical, and authenticating said 
authentication apparatus. 

9. (original) A mobile terminal wherein: 

comprising storage means storing an electronic value, generating value authentication 
information (F(VPW')) wherein value authentication information (VPW) corresponding to said 
electronic value input by a user is encoded by a first irreversible calculation process (F), further 
generating a first random number (R2), further encoding by a second irreversible calculation 
process (G) on data wherein said value authentication information (F(VPW')) and said first 
random number (Rl) received from authentication apparatus are concatenated, generating 
authentication information (G(R1,F(VPW 5 ))), and transmitting said electronic value, 
authentication information (G(R1,F(VPW 5 ))) and said second random number (R2) to 
authentication apparatus, thereby authenticating user to be the rightful owner of said electronic 
value, generating authentication information (I(R1,R2,F(VPW))) wherein said first random 
number (Rl), said second random number (R2) and value authentication information (F(VPW')) 
are concatenated and encoded by a third irreversible calculation process (I), collating said 
authentication information (I(R1,R2,F(VPW))) received from said authentication apparatus with 
generated authentication information (I(R1,R2,F(VPW))), verifying that they are identical, and 
authenticating said authentication apparatus, and updating said electronic value to electronic 
value received from said authentication apparatus. 

10. (original) The mobile terminal of any one of claims 7 to 9 wherein: 
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decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by a fourth 
irreversible calculation process (H) and master key, said mobile terminal generates data 
(H(F(VPW))) wherein value authentication information (F(VPW')) is encoded by said fourth 
irreversible calculation process (H) and transmits said electronic value, said authentication 
information (G(R,F(VPW))) and data (H(F(VPW)))to authentication apparatus, thereby 
authenticating user to be the rightful owner of said electronic value. 

1 1 . (original) The mobile terminal of any one of claims 7 to 9 characterized in that: 
said storage means stores a property which is attribute information set with respect to 

each electronic value with said electronic value, 

in authentication process with the use of said electronic value, an operation is executed 
based on said property. 

12. (original) The mobile terminal of any one of claims 7 to 9 characterized in that: 
said storage means stores property which is attribute information set with respect to each 

electronic value with said electronic value, 

in authentication process with the use of said electronic value, an operation is executed 
based on user terminal control information received from said authentication information and 
said property. 

13. (original) An authentication apparatus characterized in: 
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generating a random number (R) and transmitting it to mobile terminal, receiving 
authentication information (G(R,F(VPW))) and electronic value from said mobile terminal, 
decrypting code of encrypted part of electronic value, and validating said electronic value, 
further extracting value authentication information (F(VPW)) from said electronic value, 
generating authentication information (G(R,F(VPW))) wherein value authentication information 
(F(VPW)) and random number (R) are concatenated and encoded by an irreversible calculation 
process (G), and collating received authentication information (G(R,F(VPW 5 ))) with generated 
authentication information (G(R,F(VPW))), verifying that they are identical, thereby 
authenticating user. 

14. (original) An authentication apparatus wherein: 

generating a first random number (Rl) and transmitting it to mobile terminal, receiving 
authentication information (G(R1,F(VPW))), electronic value and a second random number 
(R2) from said mobile terminal, decrypting code of encrypted part of electronic value, and 
validating said electronic value, further extracting value authentication information (F(VPW)), 
generating authentication information (G(R1,F(VPW))) wherein value authentication 
information (F(VPW)) and said first random number (Rl) are concatenated and encoded by a 
irreversible calculation process (G), and collating received authentication information 
(G(R1,F(VPW))) with generated authentication information (G(R1,F(VPW))), verifying that 
they are identical, authenticating user, further generating authentication information 
(I(R1,R2,F(VPW))) wherein value authentication information (F(VPW)), said first random 
number (Rl) and said second random number (R2) received from mobile terminal are 
concatenated and encoded by a irreversible calculation process (I), and transmitting said 
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authentication information (I(R1,R2,F(VPW))) to user side, thereby being authenticated by 
mobile terminal. 

15. (original) An authentication apparatus wherein: 

generating a first random number (Rl) and transmitting it to mobile terminal, receiving 
authentication information (G(R1,F(VPW))), electronic value and a second random number 
(R2) from said mobile terminal, decrypting code of encrypted part of electronic value, and 
validating said electronic value, further extracting value authentication information (F(VPW)), 
generating authentication information (G(R1,F(VPW))) wherein value authentication 
information (F(VPW)) and said first random number (Rl) are concatenated and encoded by a 
first irreversible calculation process (G), and collating received authentication information 
(G(R1,F(VPW))) with generated authentication information (G(R1,F(VPW))), verifying that 
they are identical, authenticating user, further generates electronic value whose content is 
updated, further generates authentication information (I(R1,R2,F(VPW))) wherein value 
authentication information (F(VPW)), said first random number (Rl) and said second random 
number (R2) received from mobile terminal are concatenated and encoded by a second 
irreversible calculation process (I), and transmitting said authentication information 
(I(R1,R2,F(VPW))) to user side, and updating electronic value in mobile terminal to said updated 
electronic value. 

16. (original) The authentication apparatus of any one of claims 13 to 15 wherein: 
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a decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by a third 
irreversible calculation process (H) and master key, 

said authentication apparatus generates said decryption key from data (H(F(VPW))) received 
from said mobile terminal and master key, and decrypts code of received electronic value. 

17. (original) The authentication apparatus of any one of claims 13 to 15, comprising a 
security module having a tamper-resistant function, characterized in that: 

said security module decrypts the encrypted part of said electronic value, stores a 
negative list of electronic values, and verifies that said received electronic value is not listed in 
said negative list of electronic value at the point of validation of said received electronic value. 

1 8. (original) The authentication apparatus of claim 1 7 wherein: 

said security module communicates with a center and updates information stored in said 
security module. 

1 9. (original) The authentication apparatus of any one of claims 1 3 to 1 5 wherein: 
transmitting user terminal information to a mobile terminal and controlling operation of 

said mobile terminal at the point of authentication process by said electronic value and executing 
operation of its own based on service terminal control information received from said mobile 
terminal. 

20. (original) An electronic value issuance server wherein: 
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extracting authentication information (VPW) corresponding to an electronic value specified by 
user from electronic value issuance request received from said mobile terminal, generating value 
authentication information (F(VPW)) wherein authentication information (VPW) corresponding 
to said electronic value is encoded by said first irreversible calculation process (F) 5 generating 
encryption key from data (H(F(VPW))) wherein value authentication information (F(VPW)) is 
encoded by a third irreversible calculation process (H) and master key, generating said electronic 
value with the use of said value authentication information (F(VPW)) and said generated 
encryption key, and transmitting it to said mobile terminal. 

2 1 . (original) An electronic value issuance server wherein: 

extracting authentication information (F(VPW)) corresponding to an electronic value 
specified by user, wherein authentication information (VPW) is encoded by a first irreversible 
calculation process (F), from electronic value issuance request message received from a mobile 
terminal, generating encryption key from data (H(F(VPW))) wherein value authentication 
information (F(VPW)) is encoded by a second irreversible calculation process (H) and a master 
key, generating said electronic value with the use of said value authentication information 
(F(VPW)) and said generated encryption key, and transmitting it to mobile terminal. 

22. (original) The electronic value issuance server of either claim 20 or 21 wherein: 
said electronic value includes electronic value disclosure information and security 

information, 
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said security information is data wherein electronic value secret information, said value 
authentication information (F(VPW)) and signature information are encrypted by said generated 
encryption key, 

said signature information is a digital signature for data wherein said electronic value 
disclosure information, said electronic value secret information, and said value authentication 
information (F(VPW)) are concatenated. 

23. (original) The electronic value issuance server of either claim 20 or 21 wherein: 
said electronic value includes electronic value disclosure information and security 

information, 

said security information is data wherein electronic value secret information, said value 
authentication information (F(VPW)) and signature information are encrypted by said generated 
encryption key, 

said signature information is a result of a hash calculation for data wherein said electronic 
value disclosure information, said electronic value secret information, and said value 
authentication information (F(VPW)) are concatenated. 

24. (original) The electronic value issuance server of claim 22 wherein: 

generating risk management information based on credit information of a user and result 
of risk evaluation on authentication information (F(VPW)) corresponding to said electronic value 
specified by user and building said risk management information in said electronic value secret 
information. 
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25. (original) An authentication system, comprised of mobile terminal managed by user, 
authentication apparatus and electronic value issuance server, wherein: 

said mobile terminal stores electronic value received from said electronic value issuance 

server, 

said electronic value includes an encrypted value authentication information (F(VPW)) 
wherein authentication information (VPW) corresponding to electronic value specified by user is 
encoded by a first irreversible calculation process (F), 

in process for authenticating user to be the rightful owner of said electronic value, 
authentication apparatus generates random number (R) and transmits it to mobile terminal, 

mobile terminal generates value authentication information (F(VPW')) from 
authentication information (VPW) corresponding to electronic value specified by user, further 
generates authentication information (G(R,F(VPW))) wherein value authentication information 
(F(VPW 5 )) and said random number (R) are concatenated and encoded by a second irreversible 
calculation process (G), and transmits said electronic value and authentication information 
(G(R,F(VPW))) to said authentication apparatus, 

authentication apparatus decrypts code of received electronic value, extracts value 
authentication information (F(VPW)) from electronic value, generates authentication information 
(G(R,F(VPW))) wherein value authentication information (F(VPW)) and said random number 
(R) are concatenated and encoded by said second irreversible calculation process (G), collates 
said received authentication information (G(R,F(VPW))) with said generated authentication 
information (G(R,F(VPW))), verifies that they are identical, and authenticates user. 
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26. (original) The authentication system of claim 25 wherein: 

said decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by a third 
irreversible calculation process (H) and master key, 

in process for authenticating user as the right owner of said electronic value, said user 
side further generates data (H(F(VPW))) wherein value authentication information (F(VPW')) is 
encoded by a third irreversible calculation process (H), transmits data (H(F(VPW))) with said 
electronic value and said authentication information (G(R,F(VPW))) to authentication 
apparatus, 

authentication apparatus generates decryption key from received data (H(F(VPW))) and 
master key, decrypts code of received electronic value. 

27. (original) A mutual authentication system, comprised of mobile terminal managed 
by user, authentication apparatus and electronic value issuance server, wherein: 

said mobile terminal stores electronic value received from said electronic value issuance 

server, 

said electronic value includes an encrypted value authentication information (F(VPW)) 
wherein authentication information (VPW) corresponding to electronic value specified by user is 
encoded by a first irreversible calculation process (F), 



17 



in mutual authentication process wherein authentication apparatus authenticates user as 
the right owner of said electronic value and user authenticates authentication apparatus, 

authentication apparatus generates a first random number (Rl) and transmits it to mobile 
terminal, 

mobile terminal generates value authentication information (F(VPW')) from 
authentication information (VPW) corresponding to electronic value specified by user, further 
generates a second random number (R2), further generates authentication information 
(G(R1,F(VPW))) wherein value authentication information (F(VPW')) and said first random 
number (Rl) are concatenated and encoded by a second irreversible calculation process (G), 
transmits said electronic value, authentication information (G(R1,F(VPW))) and said second 
random number (R2) to said authentication apparatus, 

authentication apparatus decrypts code of received electronic value, extracts value 
authentication information (F(VPW)) from electronic value, generates authentication information 
(G(R1,F(VPW))) wherein value authentication information (F(VPW)) and said first random 
number (Rl) are concatenated and encoded by said second irreversible calculation process (G), 
collates said received authentication information (G(R1,F(VPW))) with said generated 
authentication information (G(R1,F(VPW))), verifies that they are identical, and authenticates 
user, further generates authentication information (I(R1,R2,F(VPW))) wherein value 
authentication information (F(VPW)), said first random number (Rl), and said second random 
number (R2) are concatenated and encoded by a third irreversible calculation process (I), and 
transmits it to mobile terminal, 
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mobile terminal generates authentication information (I(R1,R2 5 F(VPW'))) wherein value 
authentication information (F(VPW')), said first random number (Rl), and said second random 
number (R2) are concatenated and encoded by said third irreversible calculation process (I), 
collates said received authentication information (G(R1,F(VPW))) with said generated 
authentication information (G(R1,F(VPW))), verifies that they are identical, and authenticates 
authentication apparatus. 

28. (original) The mutual authentication system of claim 27 wherein: 

decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by a fourth 
irreversible calculation process (H) and a master key, 

in mutual authentication process wherein authentication apparatus authenticates user as 
the rightful owner of said electronic value and user authenticates the authentication apparatus, 
mobile terminal further generates data (H(F(VPW))) wherein value authentication information 
(F(VPW')) is encoded by said fourth irreversible calculation process (H), transmits data 
(H(F(VPW))), said electronic value, said authentication information (G(R1,F(VPW))), and said 
second random number (R2) to authentication apparatus, 

said authentication apparatus generates a decryption key from received data 
(H(F(VPW 5 ))) and said master key, decrypts code of received electronic value. 

29. (original) An electronic value update system wherein: 
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a mobile terminal stores an electronic value received from an electronic value issuance 

server, 

said electronic value includes encrypted value authentication information (F(VPW)) 
wherein authentication information (VPW) corresponding to electronic value specified by user is 
encoded by a first irreversible calculation process (F), 

an authentication apparatus validates said electronic value and updates content of 
electronic value during updated, 

said authentication apparatus generates a first random number (Rl) and transmits it to 
said mobile terminal 

said mobile terminal generates value authentication information (F(VPW')) from 
authentication information (VPW) corresponding to an electronic value specified by a user, 
further generates a second random number (R2), further generates authentication information 
(G(R,F(VPW')» wherein value authentication information (F(VPW')) and said first random 
number (Rl) are concatenated and encoded by a second irreversible calculation process (G), and 
transmits said electronic value, authentication information (G(R1,F(VPW))) and said second 
random number (R2) to said authentication apparatus, 

authentication apparatus decrypts code of said received electronic value, extracts value 
authentication information (F(VPW)) from said electronic value, generates authentication 
information (G(R1,F(VPW))) wherein value authentication information (F(VPW)) and said first 
random number (Rl) are concatenated and encoded by said second irreversible calculation 
process (G), collates said received authentication information (G(R1,F(VPW))) with said 
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generated authentication information (G(R1,F(VPW))), verifies that they are identical, and 
authenticates the user, further generates authentication information (I(R1,R2,F(VPW))) wherein 
value authentication information (F(VPW)), said first random number (Rl), and said second 
random number (R2) are concatenated and encoded by a third irreversible calculation process (I), 
transmits said electronic value whose content is updated and authentication information 
(I(R1,R2,F(VPW))) to said mobile terminal, 

said mobile terminal generates authentication information (I(R1,R2,F(VPW))) wherein 
value authentication information (F(VPW')), said first random number (Rl), and said second 
random number (R2) are concatenated and encoded by said third irreversible calculation process 
(I), collates said received authentication information (G(R1,F(VPW))) with said generated 
authentication information (G(R1,F(VPW))), verifies that they are identical, and authenticates 
authentication apparatus, and updates said electronic value to said received electronic value. 

30. (original) The electronic value update system of claim 29 wherein: 

a decryption key of encrypted part of said electronic value is generated from data 
(H(F(VPW))) wherein value authentication information (F(VPW)) is encoded by a fourth 
irreversible calculation process (H) and master key, 

in update process wherein authentication apparatus validates said electronic value and 
updates content of electronic value, mobile terminal further generates data (H(F(VPW))) 
wherein value authentication information (F(VPW')) is encoded by said fourth irreversible 
calculation process (H), transmits data (H(F(VPW))), said electronic value, said authentication 
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information (G(R1,F(VPW))), and said second random number (R2) to said authentication 
apparatus, 

said authentication apparatus generates said decryption key from received data 
(H(F(VPW')» and master key, decrypts code of received electronic value. 

3 1 . (original) A lock apparatus wherein: 

in issuance of electronic key, an issuance function of electronic key extracting 
authentication information (F(VPW)) corresponding to electronic key specified by a user, 
wherein authentication information (VPW) is encoded by a first irreversible calculation process 
(F), from an electronic key issuance request message received from a mobile terminal, 
generating an encryption key from data (H(F(VPW))) wherein value authentication information 
(F(VPW)) is encoded by a second irreversible calculation process (H) and a master key, 
generating electronic key with the use of said value authentication information (F(VPW)) and 
said generated encryption key, and transmits it to said mobile terminal, 

in authentication of electronic key, an authentication function of electronic key 
generating a random number (R) and transmitting it to said mobile terminal, receiving 
authentication information (G(R,F(VPW))) and said electronic key from said mobile terminal, 
decrypting code of encrypted part of said electronic key, and validating said electronic key, 
further extracting value authentication information (F(VPW)) from said electronic key, 
generating authentication information (G(R,F(VPW))) wherein value authentication information 
(F(VPW)) and said random number (R) are concatenated and encoded by a third irreversible 
calculation process (G), and collating received authentication information (G(R,F(VPW))) with 



22 



generated authentication information (G(R,F(VPW))), verifying that they are identical, thereby 
authenticating user. 

32. (original) The lock apparatus of claim 3 1 wherein: 

in issuance of electronic key, generating a second random number (R0) 5 transmitting it to 
mobile terminal, extracting user identification information (J(LN 5 ,R0)) wherein lock number 
(LN') input to mobile phone by user and said second random number (RO) are concatenated and 
encoded by a fourth irreversible calculation process (J) from electronic key issuance request 
message received from mobile terminal, generating user identification information (J(LN,R0)) 
wherein lock number (LN) and said second random number (RO) are concatenated and encoded 
by a fourth irreversible calculation process (J), collating received user identification information 
(J(LN\R0)) with generated user identification information (J(LN,R0)), verifying that they are 
identical, and authenticating user, thereby issuing an electronic key. 

33. (original) The lock apparatus of claim 31 or 32 wherein: 
having storage means storing key ID of said issued electronic key, 

in authentication of electronic key, collating received key ID of electronic key with key 
ID stored in said storage means, 

executing authentication process based on said authentication information 
(G(R,F(VPW))) received from said mobile terminal and said electronic key. 
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Claims 34 - 39 (canceled) 



